CVE-2014-1513: canonical ubuntu_linux Out-of-bounds Write
Vulnerability summary
CVE-2014-1513 is a high (CVSS 9.3) Out-of-bounds Write vulnerability in canonical ubuntu_linux. EPSS estimates a 5.58% chance of exploitation in the next 30 days, higher than 92.7% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 9 · Related 3Timeline
- 19-03-2014PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
TypedArrayObject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not prevent a zero-length transition during use of an ArrayBuffer object, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based out-of-bounds write or read) via a crafted web site.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
5.58%
Chance of exploitation in the next 30 days
Percentile
93%
Versus all other CVEs
30-day change
0.00 pp
From 5.58% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (bugzilla.mozilla.org)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Redhat7 products
- enterprise_linux_desktop5.0 | 6.0
- enterprise_linux_eus6.5
- enterprise_linux_server5.0 | 6.0
- enterprise_linux_server_aus6.5
- enterprise_linux_server_eus6.5
Mozilla3 products
- firefox< 28.0 | ≥ 24.0, < 24.4
- seamonkey< 2.25
- thunderbird< 24.4
Suse3 products
Canonical1 product
- ubuntu_linuxEOL12.04 | 12.10 | 13.10
Debian1 product
- debian_linuxEOL7.0 | 8.0
Opensuse1 product
- opensuseEOL11.4 | 12.3 | 13.1
6 vendors · 16 products
References
14 links
- lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlX Refsource CONFIRMThird Party Advisory
Show all 14 references
- lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory